Skip to content
Cyber alerts

Cyber alerts

Digital.Nhs.Uk • October 29, 2026

Security updates address four vulnerabilities, including a maximum severity unauthenticated SSRF vulnerability

Active Exploitation of Citrix NetScaler ADC and NetScaler Gateway Vulnerability (CVE-2026-88779)

Successful exploitation of CVE-2026-88779 could lead to denial-of-service (DoS) under specific deployment conditions

Critical Zero-Day Vulnerability in Cisco SD-WAN Manager

Successful exploitation of CVE-2026-76504 could allow a remote attacker to bypass authentication by sending a crafted HTTP request to the API of the affected system

Apple Releases Security Updates for macOS, iOS, and iPadOS

CVE-2026-86950 is under active exploitation and could lead to arbitrary code execution

Exploitation of Microsoft SharePoint Remote Code Execution Vulnerability CVE-2026-65660

Exploitation of CVE-2026-65660 could allow an authenticated attacker with low-level access to an affected server the ability to execute code on the server

Exploitation of Zero-Day Vulnerabilities affecting Citrix NetScaler

CVE-2026-88771 & CVE-2026-88772 could allow an unauthenticated attacker to perform remote code execution

Critical RCE Vulnerability in F5 BIG-IP APM Under Exploitation

Successful exploitation of CVE-2026-94127 may allow unauthenticated remote code execution against affected BIG-IP APM OAuth deployments

Proof-of-Concept Exploit Code Released for Veeam Vulnerability CVE-2026-32996

Exploitation of Veeam Agent for Microsoft Windows vulnerability could allow local privilege escalation to SYSTEM privileges

Critical Vulnerability in Cisco Secure Firewall Management Center Under Exploitation

Cisco reports exploitation of CVE-2026-20079 which could allow a remote attacker to bypass authentication

Check Point Releases Security Advisory for Critical Vulnerability in Security Management and Log Servers

CVE-2026-91843 could allow unauthenticated remote code execution with root privileges on affected Check Point management systems